fix: full review pass (main process, voice pipeline, Hermes client, HUD) and e2e-validated local voice (v2.1.0.1)

Electron main
- utility-process channel: sherpa output copied into V8 buffers (Electron rejects external
  buffers), audio exchanged as base64; worker restart on timeout, identity-safe exit handling,
  deterministic native unload by restart
- webhook: loopback by default without secret, UTF-8-safe body assembly, clean restart, port validation
- files IPC: realpath-based root check, openPath allow-list (reveal-only outside document folders),
  Windows reserved names; store: debounced async atomic writes with backup of corrupt files;
  logger: streaming writes with rotation; log message size cap
- HTTP stream proxy: socket released on idle timeout / renderer destroyed, id validation
- model manager: inactivity timeout, retrying rm/rename (Windows locks), engine stopped before
  replacing a model; WAV decoder handles float/24-bit; IPC payload validation
- window: opaque rounded window on Windows, navigation lock-down, visibility events;
  Ctrl+Alt+Escape instead of the Task Manager shortcut; single-instance guard; EVEFLOW_USER_DATA

Voice pipeline
- abort semantics (SendHandle.aborted), abort before the stream opens, session id prefixes per transport
- hands-free re-arm after replies without speech, start/stop race, no chime on auto re-arm,
  no silence shipped to STT (400 ms pre-roll), no transcription of empty manual stops
- TTS: bounded prefetch, cancellable segments, non-interrupting notices, volume applied at play time
- SSE CRLF split, usage in chat completions, finish_reason length, phonetic regex hoisted

HUD
- core renderer: no canvas shadows, cached colours, reusable spectrum buffer, theme read on change,
  30 fps idle, stops when the window is hidden; ping flashes on send / tool / speech
- deltas coalesced per animation frame; stable auto-scroll; narrow selectors everywhere
- bundled fonts (offline), reduce-motion fix, error toasts, ops drawer below 1180 px,
  interim transcript and first-token latency in the core caption, Ctrl+K, dialog semantics,
  switch/aria roles, compact widget cleanup, Whisper small recommended for French
- docs/ROADMAP.md: audit results, e2e results and the plan towards a real JARVIS

Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_017Wn5VX9HNbJ7N54hR24u9Y

src/state/chat.ts

@@ -53,6 +53,10 @@ interface ChatStore {
   hudOverride: HudState | null;
   error: string | null;
   draft: string;
+  /** Incremented to make the core flash briefly. */
+  pingCount: number;
+  /** Time to first token of the current reply, in ms. */
+  latencyMs: number | null;
 
   addMessage: (message: Omit<ChatMessage, 'id' | 'timestamp'> & Partial<Pick<ChatMessage, 'id' | 'timestamp'>>) => string;
   updateMessage: (id: string, patch: Partial<ChatMessage> | ((m: ChatMessage) => Partial<ChatMessage>)) => void;
@@ -68,6 +72,8 @@ interface ChatStore {
   setHudOverride: (state: HudState | null) => void;
   setError: (error: string | null) => void;
   setDraft: (draft: string) => void;
+  ping: () => void;
+  setLatency: (ms: number | null) => void;
 }
 
 const MAX_MESSAGES = 400;
@@ -83,6 +89,8 @@ export const useChat = create<ChatStore>((set, get) => ({
   hudOverride: null,
   error: null,
   draft: '',
+  pingCount: 0,
+  latencyMs: null,
 
   addMessage: (message) => {
     const id = message.id ?? uid('msg');
@@ -137,5 +145,7 @@ export const useChat = create<ChatStore>((set, get) => ({
   },
   setHudOverride: (hudOverride) => set({ hudOverride }),
   setError: (error) => set({ error }),
-  setDraft: (draft) => set({ draft })
+  setDraft: (draft) => set({ draft }),
+  ping: () => set((s) => ({ pingCount: s.pingCount + 1 })),
+  setLatency: (latencyMs) => set({ latencyMs })
 }));

src/state/hermes.ts

@@ -57,6 +57,8 @@ interface HermesStore {
 }
 
 const CACHE_KEY = 'eveflow.hermes.cache.v2';
+let connectInflight: Promise<void> | null = null;
+let lastCacheSnapshot = '';
 const isTerminal = (status: string) => ['ok', 'failed', 'delivery_failed', 'completed', 'error'].includes(status.toLowerCase());
 
 function runFromJob(job: HermesJob): JobRun | null {
@@ -98,7 +100,9 @@ export const useHermes = create<HermesStore>((set, get) => ({
     return new HermesClient({ ...config, model });
   },
 
-  connect: async () => {
+  connect: () => {
+    if (connectInflight) return connectInflight;
+    connectInflight = (async () => {
     const config = useSettings.getState().settings.hermes;
     if (!config.url.trim()) {
       set({ link: 'offline', linkDetail: 'URL Hermes non configurée' });
@@ -126,6 +130,10 @@ export const useHermes = create<HermesStore>((set, get) => ({
       set({ link: 'offline', linkDetail: message, transport: resolveTransport(config, null) });
       Log.warn('hermes', `connection failed: ${message}`);
     }
+    })().finally(() => {
+      connectInflight = null;
+    });
+    return connectInflight;
   },
 
   refreshCatalog: async () => {
@@ -157,13 +165,18 @@ export const useHermes = create<HermesStore>((set, get) => ({
       const merged = [...incoming, ...previous.filter((r) => !incoming.some((i) => i.id === r.id))]
         .sort((a, b) => new Date(b.at).getTime() - new Date(a.at).getTime())
         .slice(0, 100);
-      set({ jobs, jobRuns: merged, lastSyncAt: Date.now(), link: get().link === 'offline' ? 'online' : get().link });
-      persistSet(CACHE_KEY, { jobs, jobRuns: merged, syncedAt: Date.now() });
+      set({ jobs, jobRuns: merged, lastSyncAt: Date.now(), link: get().link === 'offline' || get().link === 'degraded' ? 'online' : get().link });
+      const snapshot = JSON.stringify({ jobs, jobRuns: merged });
+      if (snapshot !== lastCacheSnapshot) {
+        lastCacheSnapshot = snapshot;
+        persistSet(CACHE_KEY, { jobs, jobRuns: merged, syncedAt: Date.now() });
+      }
     } catch (err) {
       const message = (err as Error).message;
       Log.warn('hermes', `jobs sync failed: ${message}`);
       if (/HTTP 404/.test(message)) return; // jobs API disabled on this server
-      set({ link: 'offline', linkDetail: message });
+      // A failing jobs poll does not mean chat is down: degrade, and let the next health probe decide.
+      set({ linkDetail: message, link: get().link === 'online' ? 'degraded' : get().link });
     }
   },